HackTool.Win32.Radmin.HA

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Diese Malware hat keine Verbreitungsroutine.

Diese Malware hat keine Backdoor-Routine.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Verbreitung

Diese Malware hat keine Verbreitungsroutine.

Backdoor-Routine

Diese Malware hat keine Backdoor-Routine.

Andere Details

Es macht Folgendes:

• It displays the following upon execution:
  
• It displays the following upon clicking View license button:
  
• It displays the following application information:
• Diagnostic:
• Wrapper state
• Service state
• Listener state
• App version
• It has the following functions:
• It executes the following command to add a new rule named "Remote Destop" and changes the local port from default value (TCP port 3389) to user specified port.
• netsh advfirewall firewall set rule name="Remote Desktop" new localport={User Specified Port}
• General Settings:
• Enable Remote Destop
• RDP port selection
• Single session per user
• Hide users on logon screen
• Allow to start custom programs
• Authentication Mode:
• GUI Authentication Only
• Default RDP Authentication
• Network Level Authentication
• Session Shadowing Mode:
• Disable Shadowing
• Full access with user's permission
• Full access without permission
• View only with user's permission
• View only without permission